@adaptic/backend-legacy (0.0.941), @adaptic/lumic-utils (>=1.0.8, <=1.0.35) +321 more potentially affected by CVE-2026-34451 via @anthropic-ai/sdk (>=0.79.0, <=0.80.0)

@anthropic-ai/sdk NPM version =0.79.0, =1.0.8, =0.0.99, =1.0.0, =1.2.2, =0.4.2, =0.25.0, =1.0.0, =1.3.0, =0.0.0, =0.0.0, =0.1.0, =0.100.0, =0.2.91, =2026.5.19-1, =2026.5.21 and more Source cves: CVE-2026-34451 Source advisory: SNYK:JS-ANTHROPICAISDK-15907874...

@adaptic/backend-legacy (0.0.941), @adaptic/lumic-utils (>=1.0.8, <=1.0.35) +321 more potentially affected by CVE-2026-34451 via @anthropic-ai/sdk (>=0.79.0, <=0.80.0)

@anthropic-ai/sdk NPM version =0.79.0, =1.0.8, =0.0.99, =1.0.0, =1.2.2, =0.4.2, =0.25.0, =1.0.0, =1.3.0, =0.0.0, =0.0.0, =0.1.0, =0.100.0, =0.2.91, =2026.5.19-1, =2026.5.21 and more Source cves: CVE-2026-34451 Source advisory: OSV:GHSA-5474-4W2J-MQ4C...

CVE-2026-34451

Claude SDK for TypeScript provides access to the Claude API from server-side TypeScript or JavaScript applications. From version 0.79.0 to before version 0.81.0, the local filesystem memory tool in the Anthropic TypeScript SDK validated model-supplied paths using a string prefix check that did no...